CVE-2018-6191 (https://nvd.nist.gov/vuln/detail/CVE-2018-6191): The js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation. CVE-2018-5759 (https://nvd.nist.gov/vuln/detail/CVE-2018-5759): jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service (excessive recursion) via a crafted file.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=63926daea9a8a9b4e5e6f49b5159b5cdd6dd39b7 commit 63926daea9a8a9b4e5e6f49b5159b5cdd6dd39b7 Author: Virgil Dupras <vdupras@gentoo.org> AuthorDate: 2018-10-07 02:13:03 +0000 Commit: Virgil Dupras <vdupras@gentoo.org> CommitDate: 2018-10-07 02:13:03 +0000 dev-lang/mujs: bump to 1.0.4 Bug: https://bugs.gentoo.org/605554 Bug: https://bugs.gentoo.org/646784 Signed-off-by: Virgil Dupras <vdupras@gentoo.org> Package-Manager: Portage-2.3.50, Repoman-2.3.11 dev-lang/mujs/Manifest | 1 + dev-lang/mujs/files/mujs-1.0.4-gentoo.patch | 23 ++++++++++++++++ dev-lang/mujs/mujs-1.0.4.ebuild | 42 +++++++++++++++++++++++++++++ 3 files changed, 66 insertions(+)
New ebuild pushed. Tested on a bump of mupdf I'm working on, seems to be working. Arches, please stabilize dev-lang/mujs-1.0.4. Thanks!
x86 stable
amd64 stable
ia64 stable
Stable on alpha.
hppa stable
ppc stable
ppc64 stable
sparc stable
arm: due to stabilization delays, I'll soon have to drop the stable keyword on this package and cleanup old and vulnerable versions.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e9aabe50eeb1ae673c9ad99ad03b83284350cdfb commit e9aabe50eeb1ae673c9ad99ad03b83284350cdfb Author: Virgil Dupras <vdupras@gentoo.org> AuthorDate: 2018-10-30 00:49:00 +0000 Commit: Virgil Dupras <vdupras@gentoo.org> CommitDate: 2018-10-30 00:50:23 +0000 dev-lang/mujs: remove old and vulnerable Bug: https://bugs.gentoo.org/646784 Signed-off-by: Virgil Dupras <vdupras@gentoo.org> Package-Manager: Portage-2.3.51, Repoman-2.3.11 dev-lang/mujs/Manifest | 1 - dev-lang/mujs/files/mujs-1.0.1-gentoo.patch | 37 ------------------------- dev-lang/mujs/mujs-0_p20161202.ebuild | 4 +-- dev-lang/mujs/mujs-1.0.1-r1.ebuild | 42 ----------------------------- 4 files changed, 2 insertions(+), 82 deletions(-)
Today I learned about unsupported architecture. This bug's workflow wasn't blocked by arm's stabilization. Cleanup done.
arm stable
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d64139fbc5e17baed1d1f36a221286e1b0aa3096 commit d64139fbc5e17baed1d1f36a221286e1b0aa3096 Author: Virgil Dupras <vdupras@gentoo.org> AuthorDate: 2018-11-17 20:11:39 +0000 Commit: Virgil Dupras <vdupras@gentoo.org> CommitDate: 2018-11-17 20:12:28 +0000 dev-lang/mujs: remove old and vulnerable Bug: https://bugs.gentoo.org/646784 Signed-off-by: Virgil Dupras <vdupras@gentoo.org> Package-Manager: Portage-2.3.51, Repoman-2.3.11 dev-lang/mujs/Manifest | 1 - .../mujs/files/mujs-0_p20150202-Makefile.patch | 28 ------------------ dev-lang/mujs/mujs-0_p20161202.ebuild | 34 ---------------------- 3 files changed, 63 deletions(-)
tree is clean
